Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0FtfJt8wq0Emh-V6osXYA8aq3iI.roa
File: 0FtfJt8wq0Emh-V6osXYA8aq3iI.roa (raw, json)
Hash identifier: L4uWRcwh5E0hhxrBbUPcu+5uUMhZYZv7zBitQ7s5zTU=
Subject key identifier: D0:5B:5F:26:DF:30:AB:41:26:87:E5:7A:A2:C5:D8:03:C6:AA:DE:22
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0184CF300553A4044E1CE880FDF3A16EDC43
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0FtfJt8wq0Emh-V6osXYA8aq3iI.roa
Signing time: Thu 01 Dec 2022 19:35:41 +0000
ROA not before: Thu 01 Dec 2022 19:35:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.230.0/24 maxlen: 24
95.214.176.0/24 maxlen: 24
95.214.178.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:30:05:53:a4:04:4e:1c:e8:80:fd:f3:a1:6e:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 1 19:35:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d05b5f26df30ab412687e57aa2c5d803c6aade22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:74:cb:62:32:ea:0c:73:b2:b8:2d:20:12:
06:68:23:64:38:c9:b2:1d:7b:46:f7:3e:24:21:16:
6a:97:7d:e0:ad:33:a3:c7:04:cc:3d:53:2b:ba:10:
28:c0:26:41:73:bb:a9:05:2e:5c:16:67:e6:04:c1:
4c:7f:74:71:dd:a6:c7:e4:c9:96:ef:e3:85:7b:0c:
79:d3:18:d8:a9:5e:21:22:0e:17:13:97:cb:81:1b:
5b:55:0f:fe:d2:ba:d1:47:18:3a:b1:a4:0b:48:c4:
a9:27:0a:f8:21:68:d0:00:db:22:1e:5d:91:fd:a0:
5e:c2:e6:67:ed:b9:e0:9f:2f:c0:a4:2e:c6:46:00:
4a:9e:1c:70:b0:b8:63:41:58:8c:8b:a0:c8:6e:6f:
9b:4e:a4:9c:9f:0a:e5:b0:9b:75:20:a2:fe:ae:84:
a1:0e:d8:2d:d9:b7:31:7b:41:27:9b:7f:1f:e6:37:
0d:e7:75:ef:06:0d:d4:5d:f5:6b:a3:ca:21:45:2d:
05:da:b1:cf:d6:76:da:1b:ce:9a:b8:56:70:fc:2d:
ef:ac:98:2a:9b:7a:ed:fc:f6:aa:de:06:7f:b4:e6:
c4:6b:00:dd:ff:6c:5c:79:58:77:7d:69:0d:92:b5:
2e:fa:dd:53:6e:62:0e:f9:78:c8:80:27:e6:80:44:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5B:5F:26:DF:30:AB:41:26:87:E5:7A:A2:C5:D8:03:C6:AA:DE:22
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0FtfJt8wq0Emh-V6osXYA8aq3iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
95.214.176.0/24
95.214.178.0/23
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
87:71:7a:e1:a2:07:5a:dc:45:d5:9c:b6:87:37:57:c7:b9:7d:
c4:b5:23:3b:0f:31:c3:86:1b:75:d7:71:f9:f7:03:43:32:1b:
25:53:05:8b:02:f5:cd:90:15:e8:14:bb:98:8b:48:7f:9a:26:
0e:a5:d6:bd:59:21:7e:e0:6b:56:4d:4b:87:8e:79:e8:6e:ed:
89:ee:87:84:28:81:10:7b:5a:a1:db:68:cd:30:ba:10:03:13:
e6:73:9c:4a:52:89:33:9d:46:4a:90:36:07:bc:b2:cb:c0:58:
8d:6a:09:8f:94:99:50:37:25:3f:52:8e:04:ff:26:d0:5c:ce:
ae:6e:72:a3:b5:8a:af:72:9c:56:62:36:fc:2f:40:72:03:53:
a1:64:c8:43:ae:d5:df:0c:04:07:b6:75:34:be:ef:be:0e:ab:
70:90:62:e9:b4:5f:ea:1a:6f:b5:0e:6e:b5:3c:02:39:19:62:
38:ec:cc:2c:b2:55:6b:11:1f:97:99:bc:b3:e0:bb:f3:0e:5d:
98:7f:04:1a:02:2a:06:5b:11:3e:84:f3:9a:e3:fe:ab:54:db:
04:b6:fc:31:9f:15:0b:5f:14:e9:a4:1d:9f:2c:ba:b9:29:88:
c8:85:d7:68:06:85:ce:aa:a3:23:cb:14:ed:90:f3:ad:ab:84:
27:25:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org